{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,19]],"date-time":"2026-04-19T06:04:08Z","timestamp":1776578648171,"version":"3.51.2"},"reference-count":33,"publisher":"MDPI AG","issue":"16","license":[{"start":{"date-parts":[[2022,8,12]],"date-time":"2022-08-12T00:00:00Z","timestamp":1660262400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Technion Hiroshi Fujiwara Cyber Security Research Center","award":["4501683698"],"award-info":[{"award-number":["4501683698"]}]},{"name":"Israel National Cyber Directorate","award":["4501683698"],"award-info":[{"award-number":["4501683698"]}]},{"name":"Israeli Water Authority","award":["4501683698"],"award-info":[{"award-number":["4501683698"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Modern water distribution systems (WDSs) offer automated controls and operations to improve their efficiency and reliability. Nonetheless, such automation can be vulnerable to cyber-attacks. Therefore, various approaches have been suggested to detect cyber-attacks in WDSs. However, most of these approaches rely on labeled attack records which are rarely available in real-world applications. Thus, for a detection model to be practical, it should be able to detect and localize events without referring to a predetermined list of labeled attacks. This study proposes a semi-supervised approach that relies solely on attack-free datasets to address this challenge. The approach utilizes a reduction in dimensionality by using maximum canonical correlation analysis (MCCA) followed by support vector data description (SVDD). The developed algorithm was tested on two case studies and various datasets, demonstrating consistently high performance in detecting and localizing cyber-attacks.<\/jats:p>","DOI":"10.3390\/s22166035","type":"journal-article","created":{"date-parts":[[2022,8,15]],"date-time":"2022-08-15T23:44:03Z","timestamp":1660607043000},"page":"6035","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["Detecting and Localizing Cyber-Physical Attacks in Water Distribution Systems without Records of Labeled Attacks"],"prefix":"10.3390","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4924-2636","authenticated-orcid":false,"given":"Mashor","family":"Housh","sequence":"first","affiliation":[{"name":"Department of Natural Resources and Environmental Management, University of Haifa, Haifa 3498838, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Noy","family":"Kadosh","sequence":"additional","affiliation":[{"name":"Faculty of Civil and Environmental Engineering, Technion\u2013Israel Institute of Technology, Haifa 3200003, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jack","family":"Haddad","sequence":"additional","affiliation":[{"name":"Faculty of Civil and Environmental Engineering, Technion\u2013Israel Institute of Technology, Haifa 3200003, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,8,12]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"03120003","DOI":"10.1061\/(ASCE)EE.1943-7870.0001686","article-title":"A Review of Cybersecurity Incidents in the Water Sector","volume":"146","author":"Hassanzadeh","year":"2020","journal-title":"J. Environ. Eng."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"93083","DOI":"10.1109\/ACCESS.2020.2994961","article-title":"A review of research work on network-based SCADA intrusion detection systems","volume":"8","author":"Rakas","year":"2020","journal-title":"IEEE Access"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Tuptuk, N., Hazell, P., Watson, J., and Hailes, S. (2021). A systematic review of the state of cyber-security in water systems. Water, 13.","DOI":"10.3390\/w13010081"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"05021008","DOI":"10.1061\/(ASCE)WR.1943-5452.0001400","article-title":"Cybersecurity in Water Sector: Stakeholders Perspective","volume":"147","author":"Shapira","year":"2021","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"04018048","DOI":"10.1061\/(ASCE)WR.1943-5452.0000969","article-title":"Battle of the Attack Detection Algorithms: Disclosing cyber attacks on water distribution networks","volume":"144","author":"Taormina","year":"2018","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1016\/j.envsoft.2018.11.008","article-title":"A toolbox for assessing the impacts of cyber-physical attacks on water distribution systems","volume":"112","author":"Taormina","year":"2019","journal-title":"Environ. Model. Softw."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"04018089","DOI":"10.1061\/(ASCE)WR.1943-5452.0001023","article-title":"Real-time identification of cyber-physical attacks on water distribution systems via machine learning-based anomaly detection techniques","volume":"145","author":"Abokifa","year":"2018","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Aghashahi, M., Sundararajan, R., Pourahmadi, M., and Banks, M.K. (2017). Water distribution systems analysis symposium-battle of the attack detection algorithms (BATADAL). World Environmental and Water Resources Congress 2017: International Perspectives, History and Heritage, Emerging Technologies, and Student Papers, Proceedings of the World Environmental and Water Resources Congress 2017, Sacramento, CA, USA, 21\u201325 May 2017, American Society of Civil Engineers (ASCE).","DOI":"10.1061\/9780784480595.010"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Brentan, B.M., Campbell, E., Lima, G., Manzi, D., Ayala-Cabrera, D., Herrera, M., Montalvo, I., Izquierdo, J., and Luvizotto, E. (2017). On-Line Cyber Attack Detection in Water Networks through State Forecasting and Control by Pattern Recognition. World Environmental and Water Resources Congress 2017: Hydraulics and Waterways and Water Distribution Systems Analysis, Proceedings of the World Environmental and Water Resources Congress 2017, Sacramento, CA, USA, 21\u201325 May 2017, American Society of Civil Engineers (ASCE).","DOI":"10.1061\/9780784480625.054"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"04018093","DOI":"10.1061\/(ASCE)WR.1943-5452.0001007","article-title":"Cyberattack detection using deep generative models with variational inference","volume":"145","author":"Chandy","year":"2019","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Giacomoni, M., Gatsis, N., and Taha, A. (2017). Identification of Cyber Attacks on Water Distribution Systems by Unveiling Low-Dimensionality in the Sensory Data. World Environmental and Water Resources Congress 2017: Hydraulics and Waterways and Water Distribution Systems Analysis, Proceedings of the World Environmental and Water Resources Congress 2017, Sacramento, CA, USA, 21\u201325 May 2017, American Society of Civil Engineers (ASCE).","DOI":"10.1061\/9780784480625.062"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Pasha, M.F.K., Kc, B., and Somasundaram, S.L. (2017). An Approach to Detect the Cyber-Physical Attack on Water Distribution System. World Environmental and Water Resources Congress 2017: Hydraulics and Waterways and Water Distribution Systems Analysis, Proceedings of the World Environmental and Water Resources Congress 2017, Sacramento, CA, USA, 21\u201325 May 2017, American Society of Civil Engineers (ASCE).","DOI":"10.1061\/9780784480625.065"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"132","DOI":"10.1016\/j.watres.2018.03.039","article-title":"Model-based approach for cyber-physical attack detection in water distribution systems","volume":"139","author":"Housh","year":"2018","journal-title":"Water Res."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"339","DOI":"10.1007\/s10115-016-0987-z","article-title":"A survey of methods for time series change point detection","volume":"51","author":"Aminikhanghahi","year":"2017","journal-title":"Knowl. Inf. Syst."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1541880.1541882","article-title":"Anomaly detection: A survey","volume":"41","author":"Chandola","year":"2009","journal-title":"ACM Comput. Surv."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3439950","article-title":"Deep Learning for Anomaly Detection: A Review","volume":"54","author":"Pang","year":"2021","journal-title":"ACM Comput. Surv."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"04018065","DOI":"10.1061\/(ASCE)WR.1943-5452.0000983","article-title":"Deep-learning approach to the detection and localization of cyber-physical attacks on water distribution systems","volume":"144","author":"Taormina","year":"2018","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"04020060","DOI":"10.1061\/(ASCE)WR.1943-5452.0001259","article-title":"Detecting Cyber-Physical Attacks in Water Distribution Systems: One-Class Classifier Approach","volume":"146","author":"Kadosh","year":"2020","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"04019002","DOI":"10.1061\/(ASCE)WR.1943-5452.0001035","article-title":"Battle of the water networks district metered areas","volume":"145","author":"Saldarriaga","year":"2019","journal-title":"J. Water Resour. Plan. Manag."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"45","DOI":"10.1023\/B:MACH.0000008084.60811.49","article-title":"Support Vector Data Description","volume":"54","author":"Tax","year":"2004","journal-title":"Mach. Learn."},{"key":"ref_21","unstructured":"Chang, W., Lee, C., and Lin, C. (2013). A Revisit to Support Vector Data Description (SVDD). W.Csie.Org., 1\u201320. Available online: https:\/\/citeseerx.ist.psu.edu\/viewdoc\/download?doi=10.1.1.642.6651&rep=rep1&type=pdf."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Chaudhuri, A., Kakde, D., Sadek, C., Gonzalez, L., and Kong, S. (2017, January 18\u201321). The mean and median criteria for kernel bandwidth selection for support vector data description. Proceedings of the IEEE International Conference on Data Mining Workshops, ICDMW 2017, New Orleans, LA, USA.","DOI":"10.1109\/ICDMW.2017.116"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Chaudhuri, A., Kakde, D., Sadek, C., Hu, W., Jiang, H., Kong, S., Liao, Y., Peredriy, S., and Wang, H. (2018). The Trace Criterion for Kernel Bandwidth Selection for Support Vector Data Description. arXiv.","DOI":"10.1109\/ICDMW.2017.116"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Liao, Y., Kakde, D., Chaudhuri, A., Jiang, H., Sadek, C., and Kong, S. (2018, January 17\u201319). A new bandwidth selection criterion for using SVDD to analyze hyperspectral data. Proceedings of the Algorithms and Technologies for Multispectral, Hyperspectral, and Ultraspectral Imagery XXIV, Orlando, FL, USA.","DOI":"10.1117\/12.2314964"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"832","DOI":"10.1109\/34.709601","article-title":"The random subspace method for constructing decision forests","volume":"20","author":"Ho","year":"1998","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Lazarevic, A., and Kumar, V. (2005, January 21\u201324). Feature bagging for outlier detection. Proceedings of the ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Chicago, IL, USA.","DOI":"10.1145\/1081870.1081891"},{"key":"ref_27","unstructured":"Rossman, L.A. (2000). EPANET 2 Users Manual EPA\/600\/R-00\/57."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Li, D., Chen, D., Jin, B., Shi, L., Goh, J., and Ng, S.K. (2019, January 17\u201319). MAD-GAN: Multivariate Anomaly Detection for Time Series Data with Generative Adversarial Networks. Proceedings of the 28th International Conference on Artificial Neural Networks, Munich, Germany.","DOI":"10.1007\/978-3-030-30490-4_56"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3136624","article-title":"A Tutorial on Canonical Correlation Methods","volume":"50","author":"Uurtio","year":"2018","journal-title":"ACM Comput. Surv."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"H\u00e4rdle, W.K., and Simar, L. (2013). Applied Multivariate Statistical Analysis, Springer.","DOI":"10.1007\/978-3-642-17229-8"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"3014","DOI":"10.1214\/17-AOS1647","article-title":"Two-sample kolmogorov-smirnov-type tests revisited: Old and new tests in terms of local levels","volume":"46","author":"Finner","year":"2018","journal-title":"Ann. Stat."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"He, H., and Ma, Y. (2013). Imbalanced Learning: Foundations, Algorithms, and Applications, Wiley-IEEE Press.","DOI":"10.1002\/9781118646106"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1961189.1961199","article-title":"LIBSVM: A Library for support vector machines","volume":"2","author":"Chang","year":"2011","journal-title":"ACM Trans. Intell. Syst. Technol."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/16\/6035\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T00:08:02Z","timestamp":1760141282000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/16\/6035"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8,12]]},"references-count":33,"journal-issue":{"issue":"16","published-online":{"date-parts":[[2022,8]]}},"alternative-id":["s22166035"],"URL":"https:\/\/doi.org\/10.3390\/s22166035","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,8,12]]}}}